[repo][cleanup] Cleanup Learning Repo (#1)#2
Conversation
Cleaning up repo to make it a notebook-first hub. Adding minimal CI to make sure repo hygiene is kept. Closes #1
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 76d08c1d9d
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| args: | ||
| - "--baseline" | ||
| - ".secrets.baseline" | ||
| exclude: "(^uv.lock$|^edgeai-mlops/models/.*|.*\\.ipynb$)" |
There was a problem hiding this comment.
Remove notebook exclusion from secret scanning
The detect-secrets hook excludes *.ipynb, which means any tokens or API keys committed inside notebook cells/outputs bypass the repository’s only broad secret scanner. Since this change positions the repo as notebook-first, that regex creates a direct security blind spot in the main artefact type and would let sensitive credentials through pre-commit and CI.
Useful? React with 👍 / 👎.
| run: uv python install 3.12 | ||
|
|
||
| - name: Sync dependencies | ||
| run: uv sync --group dev --frozen |
There was a problem hiding this comment.
Sync only dev tooling in hygiene CI
The hygiene workflow uses uv sync --group dev --frozen, but uv sync --help defines --group as additive, so this still installs default project dependencies (including TensorFlow/Torch) before lint and notebook checks run. That makes repo-hygiene failures depend on heavyweight ML package availability and install stability, even though the job only needs dev tools; use an --only-group dev style sync to avoid unrelated CI breakage/timeouts.
Useful? React with 👍 / 👎.
Cleaning up repo to make it a notebook-first hub.
Adding minimal CI to make sure repo hygiene is
kept.
Closes #1